CVE-2022-49040: Synology Drive Client

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecified vectors.

Affected products

• Synology Drive Client: before 3.4.0-15721 (fixed in 3.4.0-15721)

Published 2024-09-26. Last modified 2026-06-17.